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Amendments to the Specification: 

Please replace paragraph [0023] with the following amended paragraph: 

FIG. 2 illustrates an example client/server system 200 is a second 
example client/server system for securely configuring a machine in a pre- 
operating system environment. A server 202 is connected to the Internet 204 
and is connected to a corporate network 210 (e.g., an Intel internal network). 
A first client type 206 (e.g., a set of laptop computers having a specific 
configuration and/or hardware) is connected to the server 202 via the Internet 
204. A second client type 208 (e.g., a set of desktop computers having a 
specific configuration and/or hardware) is also connected to the server 202 via 
the Internet 208. The first client type 206 and the second client type 208 are 
both configured to receive configuration updates from the server 202 via the 
Internet 204. 

Please replace paragraph [0031] with the following amended paragraph: 

If the Hello Message is detected (block 308), the client's message 
module 108 may send an acknowledgement message or some other indication 
that the Hello Message was received. The client 102 then determines its 
operating mode (block 316). The operating mode may be, but is not limited 
to, a managed client (e.g., a corporate IT managed machine) and/or an 
independent client (e.g., a consumer machine). If the client 102 is a managed 
client (block 318), the TPM 106 provides a conventional attestation (block 
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320). The conventional attestation may include the client's serial number, a 
TPM_Quote (e.g., a cryptographic reporting of [[PCR]] Platform 
Configuration Registers (PCR) values), and/or a client's network name. If the 
client 102 is not a managed client (block 318), the TPM 106 provides a 
pseudo-anonymous attestation (block 322). The pseudo-anonymous 
attestation provides a method to securely identify a client 102 without 
revealing the client's identity and/or a user's personal information (e.g., the 
pseudo-anonymous attestation provides information proving that the client 
102 is a valid platform, but does not provide information identifying the 
machine). The pseudo-anonymous attestation may include, for example, an 
AIK. 
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